Inflectionio Vulnerability Disclosure

generated: '2026-08-13'
method: searched
probe: true
source: https://docs.inflection.io/agents/mcp-trust-security
url: https://docs.inflection.io/agents/mcp-trust-security
policy: []
contact:
- security@inflection.io
bug_bounty:
  published: false
  platform: null
security_txt:
  published: false
  note: No RFC 9116 security.txt on any Inflection host (see well-known/inflectionio-well-known.yml).
summary: >-
  Inflection publishes a security-disclosure contact — "To report a security vulnerability, contact
  security@inflection.io" — under the Security disclosure heading of its MCP Trust & Security page.
  There is no standalone responsible-disclosure policy page, no safe-harbour statement, no scope or
  triage-timeline commitment, and no bug-bounty program. The address is the whole program.
evidence:
- source: https://docs.inflection.io/agents/mcp-trust-security
  kind: docs-page-security-disclosure-section
  http_status: 200
  quote: To report a security vulnerability, contact security@inflection.io
- source: https://www.inflection.io/security
  kind: probe
  http_status: 404
- source: https://www.inflection.io/.well-known/security.txt
  kind: probe
  http_status: 404
- source: https://api.inflection.io/.well-known/security.txt
  kind: probe
  http_status: 404
support_contact: support@inflection.io